Robuta

https://advisories.gitlab.com/npm/@posthog/migrator3000-plugin/GMS-2025-744/ @posthog/migrator3000-plugin contains malware after npm account takeover | GitLab Advisory Database... GMS-2025-744 @posthog/migrator3000-plugin contains malware after npm account takeover: On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0...